i can't block win98 computers

Hornet hornetmadness at gmail.com
Mon Aug 15 21:19:50 GMT 2005


On 8/15/05, vladone <vladone at spaingsm.com> wrote:
> Hi!
> I try to block some computers to acces my gateway based on MAC
> address.
> I use this ipfw rule:
>   ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface
> With this i can block XP computers but not work with Win98. I dont
> understand what is happened!
> I try against different computer with win98 OS and i can't block it.
> Only messenger is blocked but navigation work well. Computers with
> WinXP OS is blocked succesfull.
> I believe as is an problem with TCP packets that comming from Win98
> computers but i dont know how i can resolv this.
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
> 

IIRC, 98 had a hacked down version of the TCP/IP stack opposed to the
normal unix stack.
All though I don't think this would be a issue, as 98 boxes would not
be able to use any type of switch if the TCP/IP stack did not have
some type of MAC header in it.

Clear your arp table and look to see if you get an arp address for the 98 boxes.
You might find that you have a typo in the address, or pull the MAC
right off the card it self.


More information about the freebsd-questions mailing list